1. Controller
The controller for product-site, account registration, billing and the SaaS customer relationship is A.S.K. P.S.U. Sp. z o.o., Jelenie 4A, 78-630 Jelenie.
Contact: —. Privacy and data protection: —.
2. Roles in the SaaS service
For organization-account and billing data, the Operator may act as controller. For customers, equipment, service jobs, photos, notes and other data entered by an organization, the Operator generally acts as processor and the subscribing organization remains controller.
3. Data categories
- account and organization data, identifiers, address, email, phone, roles and permissions;
- billing, subscription and order data;
- technical and security data such as IP address, timestamps, logins, audit events, session identifiers and browser data;
- product-site analytics only after consent: page views, active time, traffic source, device, operating system, browser and approximate location;
- content voluntarily provided when contacting the Operator.
4. Purposes and legal bases
- entering into and performing the service contract and managing the account;
- billing, accounting and tax obligations;
- security, abuse prevention and legal claims based on the Operator’s legitimate interests;
- product-site analytics based on consent;
- handling enquiries based on the contract, legal obligations or legitimate interests depending on context.
5. Recipients and processors
Data may be entrusted to hosting, IT infrastructure, mail and technical-support providers only as necessary for the relevant purpose.
If external GeoIP enrichment is enabled, an analytics-consenting visitor’s IP address may be sent to ipwho.is to derive approximate country, region and city.
6. Retention
Account and contract data is retained for the service period and afterwards as required by law and limitation periods. Security logs may be retained for a period justified by system protection.
Product analytics is retained for the period configured by Superadmin; browser identifiers follow the Cookie Policy.
7. Individual rights
- access and a copy of personal data;
- rectification, erasure or restriction where legal conditions apply;
- data portability where applicable;
- objection to processing based on legitimate interests;
- withdrawal of consent at any time without affecting prior lawful processing;
- the right to lodge a complaint with the competent data-protection authority.
8. Required and optional data
Data marked as required during registration is necessary to create an account and provide the service. Analytics consent is optional and refusing it does not restrict the core product site.
9. Automated decisions
The Operator does not make decisions producing legal effects solely from product-site analytics. Analytics is used to understand site usage.
10. Security and updates
The Operator applies technical and organizational measures appropriate to risk, including access control, tenant separation, encryption of selected secrets, audit and backups.
This Policy may change with law, technology or service changes. The current version is published on this page.